nanog mailing list archives

Re: This DNS over HTTP thing


From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Tue, 1 Oct 2019 09:37:48 +0200

On Mon, Sep 30, 2019 at 11:46:04PM -0400,
 Fred Baker <fredbaker.ietf () gmail com> wrote 
 a message of 28 lines which said:

Is there an official name for it I should be searching for?

The IETF calls it "DoH", pronounced like
"Dough". https://datatracker.ietf.org/wg/doh/about/

And it is standardized in RFC 8484, which was published one year ago. 

There are a number of such services from Google, Amazon, and
others.

And you can build your own quite easily, these days, to avoid being
dependent on a few US corporations.

One thing that bothers me about the Google implementation is that
they apparently download the IANA zone and, in effect, operate as an
informal root server. Not that I am protective of the root per se,
but the root operators operate by an ethos described in RSSAC001
(https://www.icann.org/en/system/files/files/rssac-001-root-service-expectations-04dec15-en.pdf.).

This is in line with RFC 7706 "Decreasing Access Time to Root Servers
by Running One on Loopback", and the root zone operators explicitely
authorize zone transfer, partially for this purpose.



Current thread: